Ergonomically designed multifunctional transaction terminal

ABSTRACT

An ergonomically designed transactional terminal according to the invention in one embodiment includes a housing having a top portion partially defined by a touch screen, a base, and an enlarged head portion extending forwardly from the base to define a lip. An insert style card reader having horizontally oriented feed slot opening toward the front of the housing is disposed in the lip of the housing. The feed slot may be angled downward slightly to reduce build up in the slot and to encourage a sweeping action by a card during card removal. The touch screen may be angled downward in coplanar relationship with the feed slot to improve visibility of the touch screen and to improve simultaneous observation of touch screen and card indicia.

FIELD OF THE INVENTION

The invention relates to data collection devices and more particularlyto a transaction terminal for use in aiding purchase transactions andother transactions.

BACKGROUND OF THE PRIOR ART

“Transaction terminals” of the type having a data collection (e.g. magstripe, smart card) input and signature capture capability forattachment to a point-of-sale (POS) network are growing in popularity.Unfortunately, currently available transaction terminals have beenobserved to exhibit numerous limitations.

For example, while presently available transaction terminals often areconfigured to prompt a user to enter personal identification (PIN)information, presently available transaction terminal lack adequatesecurity features for assuring that the PIN information cannot bestolen, either by overriding of an encryption routine or by theft ofencryption keys.

Presently available transaction terminals are also lacking in securityfeatures for monitoring presentation fraud. For example, whiletransaction terminals prompt a user to enter PIN information and toenter a signature, they are lacking in features which would enabledetermination of whether the person presenting information is in factthe person he purports to be.

The physical housings presently available transaction terminals havealso observed to be problematic. The reading unit of presently availabletransaction terminals is a “swipe” style mag strip card reader whichdefines a slit opening on the top of the terminal. The orientation andconfiguration of these swipe-style slot transaction terminals force areader into assuming uncomfortable and awkward body and arm positionsduring the reading process.

Other problems with present day transaction terminals exist as well. Forexample, present day transaction terminal allow unscrupulous persons toopen the terminal, and remove secure information bearing microchips orto syphon information from the chips.

There is a need to address these and other problems observed withpresently available transaction terminals.

SUMMARY OF THE INVENTION

According to its major aspects and broadly stated the invention is anergonomically designed multifunctional transaction terminal for use invarious transactions such as transactions involving credit cards, debitcards, and customer loyalty cards.

A transactional terminal according to the invention in one possibleembodiment includes a housing having a top portion partially defined bya touch screen, a base, and an enlarged head portion extending forwardlyfrom the base to define a lip. An insert style card reader havinghorizontally oriented feed slot opening toward the front of the housingis disposed in the lip of the housing. The feed slot may be angleddownward slightly to reduce build up in the slot and to encourage asweeping action on the part of a card during card removal. The touchscreen may be angled downward in coplanar relationship with the feedslot to improve visibility of the touch screen and to improvesimultaneous observation of touch screen and card indicia. The housingmay include a detachable riser and may be adapted to receive adetachable holder apparatus for holding a stylus.

The transaction terminal according to the invention may further includenumerous other features including a secure information entry circuit, atamper detection security feature, an improved data I/O system, and animproved user interface system.

These and other details and advantages will become apparent from thedetailed description of the preferred embodiment hereinbelow.

DETAILED DESCRIPTION OF THE DRAWINGS

FIGS. 1 a and 1 b are perspective views of an exemplary transactionterminal according to the invention;

FIG. 1 c is a top view of an exemplary transaction terminal according tothe invention;

FIG. 1 e is a side view of an exemplary transaction terminal accordingto the invention;

FIG. 1 f is a side view of a wedge style user according to theinvention;

FIG. 1 g is a bottom perspective view of a transaction terminalaccording to the invention;

FIGS. 1 h and 1 i are cutaway side views of an exemplary transactionterminal according to the invention;

FIGS. 1 j and 1 k are bottom perspective views of an exemplarytransaction terminal according to the invention having SAMS accessdoors;

FIGS. 1L and 1 m is a terminal according to the invention including anintegrated fingerprint scanner.

FIG. 1 n shows a universal cable of the invention;

FIG. 1 o is a top view of a universal connection of the invention;

FIG. 1 p is a side view of a terminal including an optical reader;

FIG. 1 q is a front view of a terminal according to the inventionincluding an optical reader, a retinal scanner and a fingerprintscanner;

FIG. 1 r is a perspective view of a riser.

FIGS. 1 s-1 t are view of terminals in an exemplary embodiment forillustrating dimensional features.

FIG. 2 a is a functional electrical block diagram of an exemplarytransaction terminal according to the invention;

FIG. 2 b is an exemplary chip system architecture diagram of anexemplary transaction terminal according to the invention;

FIG. 2 c is a functional electrical block diagram showing of a securityblock shown in the block diagram of FIG. 2 a;

FIG. 2 d shows an alternative embodiment of a security block accordingto the invention;

FIG. 2 e shows a functional block diagram of a secure information entrycircuit of the invention;

FIGS. 2 f and 2 g are memory maps illustrating just two of severalpossible embodiments of firmware;

FIG. 2 h is a flow diagram illustrating an exemplary encryption routineaccording to the invention;

FIG. 3 a is a flow diagram illustrating a flow of events in a typicalPOS transaction;

FIGS. 3 b-3 e show various embodiments of possible POS networks;

FIGS. 3 f-3 g illustrate alternative cash registers which may bedisposed in communication with a transaction terminal of the invention;

FIG. 4 a is an exemplary assembly diagram for an exemplary transactionterminal according to the invention;

FIGS. 4 b and 4 c are detailed assembly diagrams illustrating a break-indetection feature according to the invention;

FIG. 4 d is a partial exploded perspective view of a main PCB of anexemplary transaction terminal according to the invention;

FIG. 5 a is a side view of an exemplary stylus and cord according to theinvention;

FIG. 5 b is a cutaway partial side view of the stylus shown in FIG. 5 a;

FIGS. 5 c, 5 d, and 5 f are perspective views of a stylus holderassembly according to the invention;

FIG. 5 e is a side view of a holder assembly according to the invention;

FIGS. 6 a-6 d are various perspective views of a hybrid reader unitwhich may be incorporated in a transaction terminal according to theinvention;

FIGS. 7 a-7 b are functional diagrams illustrating a brooming effect ofthe invention;

FIG. 7 c is a business model diagram illustrating a method for marketingad supplying a terminal according to the invention;

FIGS. 8 a-8 b are function lay-out diagrams of a touch screen overlay;

FIG. 9 illustrates a prior art transaction terminal.

DETAILED DESCRIPTION OF THE INVENTION

Perspective views of a transaction terminal according to the invention,which may be adapted for reading card information, for secure receipt ofpersonal identification (PIN) information, for signature capture, andnumerous other functions are shown in FIGS. 1 a, 1 b, and 1 g. Card 90which is processed by transaction terminal 10 may be, for example, acredit card, a debit card, customer loyalty card, an electronic benefitscard, a company-sponsored benefits card, an identification card, etc.

Transaction terminal 10 includes a rugged housing 11 having a top 11 a,a bottom 11 b, a front 11 f, and sides 11 s. Housing 11 further includesa base portion 11 bs and an enlarged head portion 11 h extendingforwardly from base 11 b to define a lip 11L. Integrated in the top 11Tof terminal is a touch screen 20, which will be described herein,comprises a display 234 and a touch sensitive overlay 23 disposed overdisplay 234. Disposed in housing lip 11L and opening toward front 11F ofhousing 11 is an insert-style card reader 240. Housing 11 furtherincludes a detachable riser 11R and a tangle-resistant stylus 30disposed in a specially configured holder apparatus 40 adapted forattachment either on housing 11 or on another member separate fromhousing 10. Terminal 10 further includes I/O connection ports 40 and 42for allowing communication with other computer systems such as cashregisters, or other host computer systems, e.g server system, or hubcomputer systems as will be described later herein.

A high level electrical block diagram of terminal 10 is shown in FIG. 2a. Terminal 10 includes a control circuit 210 which typically comprisesat least one IC microchip. For example, an Intel 133 MHz or 206 MhzSA-1110 Strong-arm CPU is suitable for use in circuit 210, althoughfaster and less expensive CPU IC's will be preferred when they becomeavailable. In addition to having a central processing unit, CPU 212,control circuit 210 further includes a memory 216 typically having atleast RAM 217 and ROM 218 memory devices. ROM 218 may be areprogrammable ROM, otherwise known as a “flash” ROM.

Control circuit 210 may be in communication with other types of ofmemory including “flash” type memory, e.g. a memory device 216F soldunder the commercial names “Multimedia MMC,” “Smart Media,” “CompactFlash,” and “Memory Stick.” Flash type memory devices are especiallyuseful for storing image data and signature data. Memory 216 which maybe included in or in communication with control circuit 210 may alsocomprise a long term storage device 216 s such as a hard drive, a floppydisk, or a compact disc. It has become increasingly common to packagememory devices, particularly RAM and ROM devices within a single IC chipincluding control circuit CPU 212, RAM 216, and ROM 218.

Control circuit 210 is in communication with a number of components,including reader unit 240 which in a preferred embodiment in an insertstyle (also known as “dip” style) hybrid magnetic stripe and smart cardreader/writer. Hybrid reader 240 may be an OEM integrated unit, e.g. aZU series reader of the type available from Matsushita of Japan, anST-40 series hybrid reader available from Secure-Tech, or a hybridreader of the type available from IDTECH. Hybrid reader unit 240includes a mag stripe reader 241 in communication with magnetic controland decode circuit 242, and smart card reader/writer 243 incommunication with smart card control and decode circuit 244. Hybridreader unit 240 may be disposed in pocket 13 defined in lower section11LW of housing 11 as seen in assembly view FIG. 4 a.

Control circuit 210 in the embodiment of FIG. 2 a is also incommunication with an RF ID reader unit having a reader 261, withassociated control and decode circuit 262. RF ID reader 261 may be, forexample a Kronegger miniaturized RF reader, readily connected to PCB290, having a 25×35 mm footprint and power consumption below 100 mareader may be mounted just under housing upper portion 261 p indicatedin FIG. 4L.

Another user interface data input device which may be disposed incommunication with control circuit 210 is an optical reader unit havingimaging assembly 263 and associated control and decode out circuit 264.Decoding could also be carried out by control circuit 210. A model IT4200 optical reader module with decode out circuit of the type availablefrom Hand Held Products, Inc. may be selected to provide the functionindicated by blocks 263 and 264. Assembly 263 could also be a linearassembly. Embodiments of transaction terminals according to theinvention including an optical reader unit having 263 are shown in FIGS.1 p and 1 q. Assembly 263 is readily installed in side 10 s of base 10bs. More particularly housing 11 can include an imaging assemblyaperture for accommodation of imaging assembly 263. The aperture mayaccommodate assembly 260 by allowing light to pass through the imagingassembly aperture in the case assembly is mounted entirely insidehousing 11 or may accommodate assembly 263 by allowing a part ofassembly 263 to extend into the exterior of housing 11 in the caseassembly 263 is mounted in such a manner that it is disposed partiallyinside and partially outside of housing 11. The height of the integratedportion of base 10 bs may be increased as shown so that e.g. a credit ordebit or identification card is readily placed in the field of view ofreader 236.

It will be appreciated that significant functionality is added toterminal 10 when terminal is equipped with an optical reader. Whenterminal 10 includes a 2D reader control circuit 210 can store frames ofimage data into memory e.g. memory 216 f. Optical reader 263 can becontrolled for use in capturing frames of image data comprisinghandwritten signatures. If control circuit 210 determines that asignature capture mode using touch screen 20 fails, control circuit 210may display a prompt prompting a user to dispose a signature bearingsubstrate in the field of view of imaging assembly 263. Circuit 210 mayfurther display on screen 20 a button for actuating image capture, thencapture a signature when a user actuates a control button. By storingthe image representation including a signature representation intomemory 216. The symbol decoding functionality of reader unit includingassembly 263 coupled with the image capture functionality of assembly263 renders terminal 10 operable to execute numerous types ofuser-interactive methods which are useful for fraud prevention and otherpurposes. U.S. Ser. No. 09/788,179, entitled “Identification CardReader” filed Feb. 16, 2001, and assigned to the assignee of the presentinvention describes numerous methods for determining whether a cardholder is the person he purports to be utilizing an optical readerhaving image capture and decode capability and numerous other methodsrelating to identification and fraud prevention. Applicants herebyexpressly incorporate herein U.S. Ser. No. 09/788,179 in its entirety byreference. It is seen from FIG. 1 q that terminal 10 may include a cardholding tray 19 for holding an identification card in the field of viewof assembly 263 such as the identification card reader card holderdescribed in detail in the above mentioned U.S. Ser. No. 09/788,179application.

Still further, control circuit 210 may be in communication with afingerprint scanner unit having a scanner 265 and associated controlcircuitry 266. A fingerprint scan unit may be provided by, for example,by a BERGDATA OEM module fingerprint scan unit or an ULTRA SCAN Corp.Series 400 OEM Fingerprint Scan unit. Transaction terminal 10 maycapture an electronic fingerprint representation and send the electronicfingerprint representation to a non-integral computer system such as acomputer system of Network 380, and Network 380 may perform theidentification. Also Network 380 may periodically download a database ofrelevant electronic fingerprint authorizations for use by controlcircuit 210 in performing fingerprint identification functions.Transaction terminals according to the invention comprising integratedfingerprint scanning units are shown in FIGS. 1L, 1 m, and 1 q. Scanner265 may include finger receiving recess 265 r integrally formed inhousing 11. Scanner sensor 265 may be disposed under a window formed inbottom surface of recess 265 f. A fingerprint scanning unit according tothe invention can also comprise an insert-stylus finger scanning unit.

Transaction terminal 10 can also include a retinal scan unit includingscanner 267 associated control circuit 268. A scan unit includingscanner 267 and control circuit 268 may be provided by components froman Icam 2001 retina scan unit available from Eye Dentify Corp. Controlcircuit 210 may perform identifications based on captured retinal scansignatures by transmitting captured electronic retinal signatures to anonintegrated computer system for identification, e.g. to Network 380,or by downloading a database of signatures from e.g. Network 380 foridentification by circuit 210. A retinal scanning transaction terminal10 is shown in FIGS. 1 m, 1 p, and 1 q showing a terminal having aretinal scanner 267 including a retinal scanner eyepiece 267 eintegrally formed in terminal housing 11.

Transaction terminal 10 further includes a touch pad screen 20 includinga display 234 and a touch pad overlay 230. Touch pad screen or “touchscreen” 20 displays information to a user such as prompt information, avirtual keypad, and advertising messages, etc. Touch screen 20 alsoserves as a means to input data. Touch screen 20 serves as both avirtual keypad and signature capture platform. Touch pad screen 20 maycomprise an LCD display 234 in combination with a touch screen overlay230. Display 234, e.g. may be a 5.7″, ¼ VGA (320×240) resolution coloror monochrome LCD screen of the type available from Nan Ya Corporation.Display 334 may be driven by an on-chip LCD controller available on amicrochip including circuit CPU 212 if circuit is appropriatelyselected, or in association with dedicated control circuit 235 as shownin FIG. 2 a. Referring to assembly view of FIG. 4 a LCD display 234 maybe mounted on LCD bracket 17 which is mounted to housing lower section11LW.

Touch screen overlay 230 may be, for example, a Nissa NIS/RC-872 overlaywith parallel interface. Touch screen overlay 230 typically operates inassociation with touch screen controller 231. Touch screen controlcircuit 231, like LCD circuit 235 can be integrated in an IC comprisingelement control circuit 210. In the embodiment shown in assembly viewFIG. 4 a, display 234 includes a side-mounted back light unit 236. Forincreasing the uniformity of illumination, display 234 could include atop-mounted backlight 236 which would occupy positions along top edge234 e of display 234. Display 234 is disposed in housing 11 so that theside mounted back light unit 236 is housed in terminal 10 on a side ofterminal 10 opposite reader unit 240. Increasing the distance betweenbacklight unit 236 and mag stripe reader 241 reduces the effect ofelectromagnetic interference from backlight unit 236. In the specificembodiment described, backlight unit 236 is powered by inverter 237which converts DC power output by power system 238 into high voltage ACpower for powering backlight 236.

As shown in FIGS. 8 a and 8 b and in accordance with a further aspect ofthe invention, touch screen 20 and more specifically overlay 230 oftouch screen 20 may be configured to be divided into zones 806 and 808,wherein zone 808 is optimized for stylus data entry and zone 806 isoptimized for entry of information by actuation by a user's finger.Overlay 230 as best seen in a conceptual schematic diagram of FIG. 8 acomprises a series of layers 810, 812, and 814, which vary in numberdepending on the selection (make and model number) of touch screenoverlay 230. Touch screen overlay 230 includes a top layer 810, which,as will be described, preferably comprises a single uniform sheet oflight transmissive material.

The inventors found that the optimal configuration for touch screenoverly 230 varies depending on the intended actuation mechanism fortouch screen 20. In certain applications, touch screens are designatedfor actuation by a finger, in other application stylus 74 and in otherapplications, such as in terminal 10, both. Touch screen overlayscomprise support mechanisms known as “microdots” 820 which areinterposed between two layers of overlay 230 as best seen in FIG. 8 a.The inventors found that the positioning of microdots 820 whichoptimizes overlay 230 for receipt of finger-entered data is not the samepositioning which optimizes overlay 230 for stylus-entered data.Notably, the inventors found that in order to optimize touch screen 20for finger-entered information, microdots 820 should be spaced to alarger average spacing distance than in a touch screen optimized forstylus-entered data.

In the invention described with reference to FIGS. 8 a and 8 b touchscreen 20 is divided into two zones, a finger entry zone 806 and astylus entry zone 808. Preferably stylus entry zone 808 is locatedforwardly of finger entry zone 806 in terminal 10 as seen in FIG. 8 b sothat a user can readily view a virtual keyboard displayed in fingeractuated zone 806, or other display messages of touch screen 20 in zone806 while entering signature information into stylus entry zone 808. Infinger actuation entry zone 806, as shown by FIGS. 8 a and 8 b,microdots 820 are spaced to an average spacing distance that is largerthan in stylus entry zone 808, wherein microdots 820 are spaced closertogether than in zone 806.

Preferably, the remaining characteristics of overlay 230 remain as theywould have been in the absence of the described microdot spacingvariation. That is, layers 810, 812, and 814 of touch screen overlay 230remain single unitary sheets of light transmissive material. Zones 806and 808 could also comprise separate and x-y dimension spaced apartsections of layering material. However, such a configuration, amongother disadvantages would not allow a person entering signatureinformation to exceed the bounds of signature zone during the course ofentering signature data and still have the signature data received.

Referring to further components of terminal 10, terminal 10 may includesecure circuit block 220, to be described in greater detail herein incommunication with circuit 210 for preventing theft of electronicallystored information such as PIN information.

Still further, transaction terminal 10 includes at least one andpreferably more than one communication interface for providingcommunication with an external computer system such as a cash register340 or a computer system 350 and 360 of a POS network to be describedherein. In the specific embodiment shown in the block diagram of FIG. 2a terminal 10 includes an ethernet interface 250, a USB interface 252 anRS485 IBM Tailgate Interface 253, an RS 232 interface 254. Referring toFIGS. 3 f and 3 g, including multiple interfaces in terminal 10 yieldsimportant advantages. When transaction terminal 10 is in communicationwith cash register via cable 60, to be described herein it is common toconcurrently connect terminal 10 via line 61 (typically an ethernetline) directly to retailer server 350. Accordingly, data andinstructional communications which are beyond the capacity of cashregister 340 (which is often a legacy system) to support can be carriedout via direct link 61 between server 350 or (if terminal 10 is properlyequipped) another computer system e.g. HUB 360, Network 322.

Terminal 10 can also include such interfaces as a PCMCIA interface 255in communication with a PCMCIA slot connector 44. Slot connecter 44 mayreceive, for example, an RF communication card, a flash memory card, anoptical reader PCMCIA card or other commonly available PCMCIA cards.PCMCIA slot connector 44 may be disposed to be accessible from theoutside of housing 11 or else PCMCIA slot connector 44 may be accessiblefrom the interior of housing 11 only. An RF or other wireless type ofinterface may also be provided in hard-wired communication with controlcircuit 210, e.g. an IR interface 277, shown in FIG. 2 b. Electricalcircuitry associated with the above types of components are morecommonly being packaged in a packaged IC that comprises elements ofcontrol circuit 210.

In accordance with the invention, several interfaces can be physicallypackaged to terminate at housing 11 of terminal 10 in a singleelectrical connector port 42. As will be discussed in greater detailherein transaction terminal 10 is commonly connected in communicationwith a cash register 340 which is PC based or PC compatible. Cashregisters commonly comprise at least one of four major types ofcommunication connector ports: PC USB, IBM retail USB, RS232 or RS485physical connector ports, each having a different PIN configuration. Inaccordance with the invention, terminal 10 includes a universalconnector port 42 which includes a plurality of pins, wherein at least afirst pin or group 51 of pins P are in communication with a first typeof interface (e.g. USB), at least a second pin or group of pins 52 arein communication within a second type of interface (e.g. RS 232).Universal connector port 42 of terminal 10 may include additional groupsof pins in communication with additional types of interface. Forexample, a third group of pins 53 may be are in communication with athird type of interface (e.g. RS485) certain types of interfaces may beadapted so that pins “P” of universal port 42 are shared. For example,RS 232 and RS 485 interfaces can be adapted so that pins of theinterfaces are shared with use of switching circuitry 272 as will bedescribed herein.

When terminal 10 comprises universal connector port 42, a supplier ofterminal 10 supplies along with terminal 10 a cable 60 for connectionwith universal connector 42 which is available in one of N varieties,where N is the number of interfaces that universal connector port 42 isin communication with within terminal 10. Thus, if universal connectorport 42 is connected to four different interfaces (RS 232, RS485, IBMretail USB, PC USB), then a supplier 10 will make available cable 60 inone of four varieties. Each variety of cable 60 will have a proximal endconnector 61 which interfaces with universal connector 42. Thus, ifuniversal connector is a 15 socket connector, the proximal end of eachvariety of cable will include a proximal end connector 61 having 15pins. The varieties of cables will differ in the connector of distal end62. The first variety of cable will have distal end connector 62 inaccordance with the standard connector form of the first type ofinterface, the second variety of cable 60 will have a distal endconnector 62 in accordance with the standard connector format of thesecond type of interface and so on. A customer will order theappropriate variety of cable from a supplier depending on the type ofinterface terminal that will be interfaced within a cash register orother host computer system. In the alternative, a supplier may supplyeach of several cable varieties to a customer and the customer may chosethe appropriate cable, and may switch cables if terminal 10 is requiredto communicate with a different interface. It can be seen that theproduct supply system including universal connector port 42 andassociated customer selected cable 60 greatly reduces the sizerequirements of terminal back end 11 rr. The universal connector andcable product supply system also significantly reduces the cost ofterminal 10 without compromising functionality, since it reduces thenumber of physical connector ports that have to be integrated duringassembly at terminal back end 11 rr.

In a further aspect of the universal connector port feature of theinvention, control circuit, 210 polls the contents of designatedinterface identifier, or “cable select pins” 42 cs pins of connector 42.When the various cables 60 are made, conductors of cable 60 are wired sothat the two conductors of cable 60 which supply the interfaceidentifier pins of interface 42 supply the identifier pins with a uniquesignature indicative of the interface to which distal end 62 of cable 60is interfaced with. For example, it will be seen that a set of cables 60can be configured so that a first variety of cable supplies interfaceidentifier pins of connector 42 with a signature of 00 indicative of aninterface of a first type, a second variety supplies a signature of 01indicative of an interface of a second type, a third variety of cable 60supplies a signature 10 indicative of an interface of a third type, anda fourth variety of cable supplies a signature 11 of a fourth type whendistal end connector 62 is connected to a device. More specifically,cable 60 can be made to provide a signature indicative of the cable typeby manufacturing cable 60 of each variation in a complementary fashionwith the voltage supply to connector 42 so that the lines of cable 60interfacing with cable select pins 42 cs of connector 42 return a highlogic value to control circuit 210, unless the lines interfacing withcable select pins 42 cs are connected within the length in cable toground. Therefore, by grounding out one line that interfaces with acable select pin 42 cs, a logic 0 is returned to the cable pin select.By grounding out both lines of cable 60 interfacing with cable selectpins 42 cs, two low data points (i.e. a 00) signature is returned tocable select pins 42 cs. Accordingly, it can be seen that circuit 210can be made to automatically identify the interface to which cable 60 isconnected to, and can automatically adjust controls of I/O interface, ofrelated circuit terminal 10 accordingly.

Additional features of the invention in an exemplary embodiment areunderstood with reference to the system architecture of FIG. 2 b.Referring to interface-related features, RS 232 and 485 interfaces 254,252 can share a common asynchronous receiver-transceiver as seen byDUART 278. A switching function indicated in FIG. 2 a by block 251 forswitching the path between connector 42 and interfaces 254, and 253 canbe provided by 232/485 level transceiver 272, which may be provided by aLinear Technology Model LTC 1387 Single 5U RS232/RS485 MultiprotocolTransceiver. Continuing with reference to FIG. 2 b, IC chip 209 carryingCPU 212 can package certain interface circuitry such as USB interfacingcircuits 252 and an IRDA interface 277. General I/O port 208 may provideoutput to indicator 287L and audio output 276 the latter, of which aprogrammer user may configure for operation with use of scriptprogramming or other programming, which will be described herein. In theexemplary embodiment, IC chip 209 is in communication with system BUS207 which includes address and data buffer 274. In the exemplaryembodiment system RAM 217 and system ROM 218 are provided. Additionallychip 209 including CPU 212 includes limited onboard RAM 217 and ROM 218.Terminal 10 in the embodiment of FIG. 2 b is powered by a multiplevoltage power system circuit 238 which distributes power to PCB 290.System 238 distributes power originating from, for example, a seriallyinterfaced device, as indicated by USB box 252, an AC/DC power supply239, e.g. a wall outlet plug-in power pack. and/or a rechargeablebattery 268.

With reference to the transaction cycle flow diagram of FIG. 3 a, anenvironment in which transaction terminal 10 may operate in accordancewith the invention is described in greater detail.

Typically, transaction terminal 10 is disposed in a retail store klosk,or customer service desk. When a customer makes a transaction using acredit card or a debit card, an electronic benefits card (EBC) orcustomer loyalty card, a customer, at STEP 1, inserts a card into insertreader to read the card. A customer may, in addition, be prompted byterminal 10 to enter PIN information into terminal 10, and may beprompted to write a signature on the terminal 10 so that terminal 10 cancapture a signature.

About the time that a customer inserts a card into terminal 10, a salesassociate, at STEP 2, enters the sales amount into POS network 300, tobe described in more detail wherein, using e.g. a keypad 340K of cashregister 340, or a bar code reader 342 or 263. In the alternative, thedollar amount can be entered into transaction terminal 10 at STEP 2. AtSTEP 3, transaction terminal 10 communicates a customer's cardinformation data determined from a reading of the card and othertransaction data to POS network 300. Transaction terminal 10 may alsocommunicate PIN information of a customer to POS 300 as part of STEP 3.Also, a transaction terminal may communicate a captured signature to POSnetwork 300 as part of STEP 3. More typically however, a signature maybe captured by terminal 10 and transmitted to POS network 300 afterauthorization is complete as will be described herein. Signature datamay be achieved for use in a signature recognition system by a retailerfor recognition by a computer system of retailer POS Network 300 or as athird party, e.g. at a computer at 380. Transaction terminal 10 may alsostore signature data for later processing, which may be performed on abatch basis. Transaction terminal 10 may also archive other transactiondata.

POS (Point-of Sale) Network 300, as is indicated in FIG. 3 a, can takeon a variety of forms. In any one of the layouts described, transactionterminal 10 can be considered part of POS network 300 once it isconnected to POS network 300. In one simple form, as is indicated byFIG. 3 b, POS Network 300 can comprise a modem 346 (e.g. cable ordial-up) or other communication device which provides communicationdebit network 320 or credit card network 322. Credit network 322 anddebit network 320 may be the same network.

In another embodiment as indicated in FIG. 3 c, POS network 300 and300-2 may comprise a cash register 340. Cash registers are currentlyavailable in two popular forms. A PC POS system cash register 340 and340-1, as shown in FIG. 3 d, typically includes a personal computerhoused in a standardly known PC housing 340PC and multiple interfacingor associated components including bar code reader 342, keyboard 340K,cash register drawer 340D, printer 340P, and monitors 340M. A dedicatedPOS Cash register, as shown in FIG. 3 g includes the functionality of aPC and typically includes several of the above components (keyboard,monitor, printer, drawer) except that the components are housed in anintegrated housing. Cash registers are equipped with communicationinterfaces e.g. dial-up or cable modem interfaces, USB interfaces,ethernet interfaces including wireless and nonwireless, which enablecommunication with external computer systems, including Terminal 10 andPOS Network 300. In one embodiment, POS Network 300 comprises a cashregister only and cash register 340 is adapted to communicate directlywith a debit network 320 or credit card network 322.

Another embodiment of POS network 300 and 300-3 is shown in FIG. 3 c. Inthe embodiment of FIG. 3 c transaction terminal communicates with onecash register 340, while cash register 340 is one of several cashregisters that is in communication with server 350, in an in-store localarea network (LAN). In the embodiment of FIG. 3 c in-store server 350 isin communication with debit network 320 and credit card network 322.

In yet another embodiment of POS network described with reference toFIG. 3 e, POS Network 300 and 300-4 includes at least one computersystem hub 360 which is under the control of a retailer yet locatedoff-site with respect to transaction terminal and other in-store devicessuch as cash registers or other transaction terminals and servers. Hub360 may be in communication with, and may be adapted to monitor andcontrol financial data transaction emanating from a plurality ofin-store servers. Hub 360 may be controlled by a retailer that operatesseveral stores at several different locations e.g. Store 1, Store 2, andStore 3. Further, there may be more than a layer of hubs. A retailer mayoperate a local hub which receives transactional data from each ofseveral in-store servers located at several different stores located ina given municipality. Several of these local hubs, in turn, may transmittransactional data to a regional hub. Several regional hubs, maytransmit transactional data to a centralized national hub. Severalnational hubs, in theory, can transmit transaction data to a singleworld-wide hub operated by a retailer having retail stores worldwide. Itis seen that hubs and the layering of hubs provide a means for retailersto monitor transactions conducted throughout several retail stores. Hub360 is often owned and operated by a retailer who owns or operates aretail store in which transaction Terminal 10 is located. However, Hub360 may also be owned by a third party service provider, and the retailstore owner may subscribe to a processing service provided by the thirdparty. Such third-party operated hubs operated in the interest of aretailer shall herein be considered to be operated by a retailer. POSNetwork 300-4 of FIG. 3 e is divided into zones. Zone 1 delineates thehardware components typically located in a first store, zone 2delineates the network component typically located in a second store,zone 3, refers to components which are typically located at a thirdstore, while zone x refers to components which are typically locatedoff-site with respect to any store.

As indicated in the embodiment of FIG. 3 e a POS Network 300 can also beconsidered to include various computer systems operated by parties otherthan a retailer or for example, a POS Network can include a DistributionNetwork 370. Distribution Network 370 refers to the computer systemsoperated by distribution service providers who receive transactionaldata from a retailer (e.g. from a computer system, a POS terminal suchas terminal 10, a hub, a server, and a cash register) and evaluate theavailability of several debit or credit card networks and route the datato one selected debit or credit card networks 320 or 322 based on anestablished criteria. Some transactions are processed without beingrouted through distribution networks and others are, normally dependenton the selection made by a retailer.

In a further aspect of POS Network 300, POS Network 300 can be incommunication with another computer Network 380, which may be theInternet (World Wide Web). Connecting POS Network 300 to another Network380 allows POS Network 300 to readily access information from a widevariety of computer databases, which information is pertinent tofinancial transactions. For example, by way of communication withNetwork 380, POS Network 380 can access such information as drive,license identification information, consumer credit rating information,consumer criminal record information, sales history information,consumer demographic data, and other consumer information. Aspects ofthe invention relating to access of information from Network 380 will bediscussed in greater detail herein.

Continuing with reference to the transaction cycle flow diagram of FIG.3 a, at STEP 4, POS Network 300 routes transaction data either a debitnetwork 320 or a credit card network 322 depending on the card type(debit or credit). Debit network 320 is a network of computer systemsoperated by a debit card agency. Credit card network 322, a network ofcomputer systems operated by a credit card supplier, such as Visa orMasterCard or a retailer issued credit card. After a transaction isapproved by an Issuing Bank, Network 300 notifies POS Network 300 ofsuch approval.

At STEP 5 debit card or credit card network 320 and 322 transmit thetransaction data to a computer system (or a network of computer systems)operated by an Issuing Bank 330. Issuing Bank 330 provides a number ofimportant functions in relation to the transaction processing cycle.Issuing bank (1) makes sure that a customer's account has sufficientfunds; (2) charges a customer's account for a transaction; (3) charges acustomer's account for any applicable fees in relation to thetransaction, and distributes the funds to appropriate parties (e.g.Distribution Network operators); and (4) monitors for card holder fraud,(5) may automatically preliminarily authorize small dollar transactions,and (6) may preliminarily authorize transactions based on riskcalculations which cannot be authorized because of technical problems(e.g. Network 322 is down); (7) capture and store a data record of thetransaction.

At STEP 6, Issuing Bank 330 debits a customer's account, and may, aspart of STEP 6, initiate action to obtain payment of the debt (if creditcard transaction from a customer). For example, Issuing Bank 330 maysend a bill to a customer's home mailing address notifying a customer ofan amount of a debt. As part of STEP 6, Issuing Bank 330 mayautomatically notify a customer of a debit via email communication to acustomer's email address, or may post a notice on the Issuing Bank'swebsite so that the notice is read when a customer opens his accountinformation from the Issuing Bank's website.

At STEP 7, POS Network 300 sends transaction data to a computer system anetwork of computer systems operated by an Acquiring Bank and AcquiringBank 332 appropriately credits a retailer's account by the amount of thetransaction less any fees. Acquiring Bank (1) credits a retailer'saccount (2) charges the retailer any applicable fees and distributesthese fees to appropriate entities involved in the transaction (e.g.Distribution network operators), (2) monitors for collection fraud, and(4) supplies information and customer service to a retailer, in partthrough communication with POS Network 300. Typically, STEP 7 is a batchprocess performed e.g. after business hours, whereas STEPS 1 through 6described herein are all performed automatically after a transaction isinitiated, within seconds of one another (except the nonelectronicmailing step described as part of STEP 6). In some instances STEP 7, iscarried out with manual data entry and human observation of financialdata records.

Some further aspects of possible transactions involving Terminal 10 canbe understood with reference to the following examples, EXAMPLE I andEXAMPLE II, wherein the term “host” in Example I and Example II is usedto refer to a computer system or network of computer systems interposedbetween a cash register and a debit/credit networks 320 and 322 asdescribed above with reference to FIG. 3 a., e.g. a “server,” or a“hub,” or a network comprising a plurality of servers and/or hubs.

EXAMPLE I Debit Transaction and Authorization

The purchaser may initiate the transaction or be prompted by the POSdevice. Electronic Benefits Transfer (EBT) using magnetic stripe cardsor smart cards is similar to a debit transaction. Rules and exactprocedures varies by State.

Note: “Off-line debit” processes as if it were a credit cardtransaction. Ordering of steps:

(A) Associate 312 initiates a new sale and begins scanning items;

(B) Purchaser 310 selects their payment option=debit;

(C) Terminal 10 saves customer selection=debit;

(D) Purchaser 310 inserts their card on the terminal MSR/SCR;

(E) Terminal 10 stores the credit card track data;

(F) Terminal 10 request PIN;

(G) Purchase 310 enters PIN;

(H) Terminal 10 encrypts PIN block and stores the result;

(I) Terminal 10 waits for POS 340 terminal request;

(J) Associate 312 completes the sale;

(K) POS 340 sends sale total to Terminal 10, waits for reply;

(L) Terminal 10 displays total and prompts the purchase for “cash back”;

(M) Purchaser 310 responds to cash back prompt, “yes”+amount or “no”;Terminal 10 requests confirmation and displays new total;

(N) Terminal 10 replies to POS 340 with track data, PIN block and“debit” flag;

(O) POS 340 sends the amount(s), card data, PIN block, terminal ID, etc.to host 300;

(P) Host 300 adds merchant data and forwards to authorization Network320;

(Q) Network 320 translates PIN block encryption to Zone key (Eachnetwork switch and processor translates the incoming PIN block to theencryption algorithm and key of the next zone);

(R) Network 320 examines card Bank ID Number (BIN) and routes to issuingbank;

(S) Issuer 330 checks account balance, account status, and fraud data;

(T) Issuer 330 verifies PIN;

(U) Issuer 330 replies “yes” or “no” for authorization or an error code;

(V) Network 320 sends issuer response to retailer host;

(W) Host 300 routes the issuer/network response to a POS terminal 340;

(X) POS 340 notifies associate of issuer response;

(Y) POS 340 sends message to Terminal 10 authorized or declined.

If authorized, the transaction is complete from the Terminal 10 point ofview.

Note: All PIN-based payments are encrypted. Responses are not encryptedor secure.

{End of Example I} EXAMPLE II Credit Transaction and Authorization

The following describes typical credit card transaction flow in U.S.networks for transactions initiated on a connected POS terminal.

The purchaser may initiate the transaction or be prompted by the POSdevice.

(A) Associate 312 initiates a new sale and begins scanning items;

(B) Purchaser 310 selects their payment option=credit;

(C) Terminal 10 saves customer selection=credit;

(D) Purchaser 310 inserts their card on the terminal MSR/SCR;

(E) Terminal 10 stores the credit card track data, waits for POSterminal request;

(F) Associate 312 completes the sale;

(G) POS 340 sends a message to the Terminal 10=“send data”;

(H) Terminal 10 replies to POS with track data and “credit” flag;

(I) POS 340 sends transaction amount, card data, terminal ID, etc. tohost along with merchant data;

(J) Host 300 adds merchant data and forwards to authorization tonetwork;

(K) Network 320 examines card Bank ID Number (BIN) and routes to issuer;

(L) Issuer 330 checks account balance and fraud data;

(M) Issuer 330 replies “yes” or “no” for authorization or an error code;

(N) Network 320 sends issuer response to retailer host;

(O) Host 300 routes the issuer/network response to the POS terminal;

(P) POS 340 notifies associate of issuer response;

(Q) POS 340 sends message to Terminal 10, authorized or declined.

(R) Purchaser 310 signs signature on touch screen 320;

(S) Signature saved at terminal 10 and/or transmitted to POS for furtherprocessing (e.g. signature recognition).

If authorized, the transaction is complete from the Terminal 10 point ofview.

Note: In the United States, credit transactions are not encrypted.Responses are not encrypted or secure. Credit transactions that areprocessed in Canada are encrypted and use MACing for data integrity.

{End of Example II}

Referring to further aspects of the invention, housing 11 of terminal 10includes a number of important features which will now be described ingreater detail. Housing includes a top 11 t, a bottom 11 b, a first side11 s, a second side 11 s, a back end 11 rr, and a front 11 f. As bestseen in FIG. 1 e, top 11 t which being substantially flat is angleddownward slightly from back 11 rr housing to front 11 f. Because touchscreen 20 is disposed substantially flush with top lit of housing 11 theangling of top 11 r enables a user to more readily observe indicia ofhousing when terminal 10 is disposed on a flat surface, e.g. a countertop. Housing 11 further includes a head 11 h including housing top 11 tand a base 11 bs including bottom 11 b.

Referring to aspects of bottom of housing 11 b with reference to FIGS. 1j and 1 k, bottom 11 b of housing 11 includes at least three andpreferably four or five feet 15, typically comprised of rubberadhesively attached material which stabilizes housing 11 on a countertop. The at least three feet 15 define a plane P_(B) on which housing 11may rest. Housing 11 may further include detachable riser 11 r alsoincluding at least three and preferably five feet 15-r. Detachable riser11 r operates to increase the height of transaction terminal 10 where aheight increase makes use of terminal 10 easier. As best seen in FIG. 1e, head 11 h of housing 11 extends forwardly from base 11 bs to define alip 11L, and mold support section lisp of housing 11 which supportshybrid reader 240 is defined in the lip 11L of housing 11. It is seenthat if housing 11 is fixed mounted on an edge of a table top so thatlip 11L extends outwardly from the edge, the riser 11 r may beunnecessary since a user's hand will not encounter substantialinterference from counter top when inserting a card 90 into reader 240.However, if transaction terminal 10 is to be mounted or rested away froman edge of a counter top, attachment of riser 11 r to housing main body11 mb will improve the accessability of reader 240 to a user, and willprevent the table top from substantially interfering with a user's handwhen a user inserts a card 90 into insert reader 240. Attachment ofriser 11 r will also benefit access to a reader by a user's hand whereterminal base 11 bs is mounted flush on a vertical wall, beam or post.Thus, it is seen that attachment of riser 11 r improves theaccessability of reader 240 under certain mounting or placementconditions while attachment of riser 11 r reduces the size of terminal10 under other mounting or placement conditions. The “feet” of terminalas will be referred to herein shall refer to feet 15 r of integratedhousing bottom 11 b when no riser is attached to housing main body 11nb, and to the to feet 15-r of riser 11 r when riser 11 r is attached tomain body 11 nb. Riser 11 r may be made detachably attachable to housingmain body 11 nb by way of a pin and key-slot arrangement as shown inFIGS. 1 j and 1 k. Riser 11 r may include headed pins (not shown) whichare fitted into hole sections 17 h of key slots 17 formed on bottom, andthe riser 11 r may be detachably engaged on body limb by sliding theheaded pins into slot section 17 s of key slots 17. As indicated in theembodiment of FIG. 1 r, riser 11 r may also be of a type that is boltedinto integral bottom 11 b of terminal by driving bolts through boltholes 23 of riser 11 r. Other fastening agers for detachably attachingriser 11 r to main body 11 mb can of course be used, such as clips andadhesives (e.g double sided adhesive pads).

As seen in FIGS. 1 g and 1 j, key slots 17 and 17 r are useful indetachably mounting terminal 10 in a mounted mode of operation tomounting (e.g walls, posts, retailer mounting apparatuses, horizontalsurfaces) members having pins (not shown) for receiving key slots 17 and17-b, so that at any time terminal 10 can be detached and used on ahorizontal surface such as a countertop in an unmounted mode ofoperation.

As shown in FIG. 1 f risers need not be made of a uniform height. Wedgeshaped riser 11 r-w, for example, is useful in certain applications.Wedge riser 11 r-w may be detachably attached to terminal main body limband then terminal 10 including main body 11 mb and wedge riser 11 r-wmay be mounted to a vertical member such as a wall, a vertical beam, ora post. The mounting method results in plane P_(R) of reader slot 245,and plane P_(S) of screen 20 being moved to a position that is closer tothe parallel position with respect to the horizontal plane. Many userswill find insert reader 240 easier to use if it is oriented in a planetilted forwardly toward the horizontal plane relative to the verticalplane.

Dimensional information relating to terminal 10 in one exemplarypreferred embodiment is summarized in FIGS. 1 r, 1 s, 1 t and 1 uwherein dimensional information is given in inches. In an exemplaryembodiment as seen in FIG. 1 u, feed path slot 245 is positioned about 1inch off ground level and 2 inches off ground level with riser 11 rattached, which in the exemplary embodiment of FIG. 1 r includes aheight of about 1 inch. The inventors found that with such a heightrange of slot 245, preferred angles for angling feed slot plane, P_(f),are between about 2° and 12° with a most preferred angle being about 7°.The inventors found that at angles greater than this range, at theheight range of between about 1 and 2 inches, card 90 became difficultto insert into reader 240 though the difficulty can be alleviated bymounting terminal on an edge of a counter or by increasing its height.At angles less than the above range, the benefits of angling, discussedfully herein, though substantial, were determined to be outweighed bythe design and assembly costs attendant to such angling. Because theoptions for angling of plane P_(s) are not limited by card insertionconcerns, it is seen that plane P_(s) can normally be angled at asteeper angle than plane P_(f). However with such inconsistent angling,the benefits yielded by essentially coplanar positioning of plane P_(f)and plane P_(s) to be described more fully herein would not be yielded.

Additional advantages of the positioning of slot 245 according to theinvention are described with reference to FIGS. 7 a and 7 bm wherein 7 ais a functional diagram of slot 245 disposed parallel to horizontalplane PH, FIG. 7 b is a functional diagram of slot 245 disposed at aslight angle with respect to horizontal plane P_(H), and arrows 710 and711 indicate the general direction of card 90 when it is removed fromfeed slot 245. It is seen by observation of either embodiment, thepositioning of slot 245 substantially in horizontal plane P_(H) yieldsthe possibility of a “fulcrum and brooming effect” as will be describedherein

A fulcrum and brooming effect is yielded when card 90 is pivoted about afulcrum 712 defined by slot top edge 712. When card 90 is pivoted aboutfulcrum 712 distal end 90 d of card 90 imparts a force against bottom345 b of slot 3455. Therefore, when card 90 is pulled out card 90 willoperate as a broom to sweep debris, moisture, particulate matter out ofslot 90.

It is seen further with reference to FIG. 7 b that the fulcrum andbrooming effect will be enhanced when slot 345 is positioned at aslightly downward angle with respect to the horizontal plane. Ifterminal 10 is positioned below a user's elbow level, as it often will,user's natural tendency will be to be to pull card up and out asindicated by arrow 711 or possibly, straight out horizontally asindicated by arrow 710.

The fulcrum and brooming effect is yielded in both embodiments when auser pulls card out and up as indicated by arrow 711. In addition, it isseen from FIG. 7 b that the fulcrum and brooming effect can be yieldedwith slot 345 disposed at a slight downward angle even when card 90 ispulled straight out in the horizontal direction indicated by arrow 710.Further, disposing slot 345 at an angle increases the force supplied bycard end 90 d on slot bottom 345 b when the fulcrum effect is present toenhance the cleaning action of the card. Still further, the broomingeffect cleaning action of card 90 in the embodiment of FIG. 7 b ismultiplied by gravitational pull forces provided by the angling of feedslot 345.

An important aspect of the invention is the positioning of insert hybridslot reader 240 in terminal 10 in relation to other components ofterminal 10. Insert reader 240 is disposed in the front of terminal 10and is accessible from the front of terminal 10. Accordingly, when acard is inserted reader 240, a user's view of screen 240 is not obscuredas in the case of the prior art transaction terminal 700 of FIG. 7having rear disposed, top opening-swipe style reader 710 and a display720. Reader 240 is also disposed in lip 11L of terminal head 11 h whichextends forwardly from base 11 bs of terminal 10. Therefore, a space sis defined by reader housing 11 as indicated by FIG. 11 h foraccommodating a person's hand while a card is inserted into reader 240of terminal 10. Still further insert reader 240 is disposed so that aplane P of feed slot P_(f) of insert reader 240 is substantiallyparallel to a plane P_(s) of screen P_(s). Accordingly, indicia ofscreen 20 and indicia of card 90 are easily viewed at the same time fromthe single vantage point of a user. In the embodiment shown in FIG. 1 iit is seen that a plane P_(f) of feed slot P_(f) is substantiallyparallel to plane P_(b-r) of feet 15-r, and plane P_(s) of screen 20,but that slot 245 is closer to a parallel relationship with touch screenplane P_(s) than it is to base plane P_(b-r) (i.e. slot plane P_(f) isessentially parallel to screen plane P_(s), and slightly angled withrespect to feet, or base plane P_(b-r)). It will be seen that slot planeP_(f) could also be disposed in terminal 10 to be essentially parallelwith base or feet plane P_(b-r) and slightly angled with respect toscreen plane P_(f), or slightly angled with respect to both base planeP_(b-r) and screen plane P_(s). It is preferred in the embodiment shownto dispose slot plane P_(f) essentially parallel with screen plane P_(s)so as to discourage the build up moisture of dust, debris, and otherparticulated matter (angling slot downward encourages a percentage ofparticulate to be forced out of slot 345 by gravity and the fulcrum andgrooming effect described herein) and to reduce the number of positionsat which specular reflections on either card or screen are observed.Whatever the orientation of slot plane P_(f) in relation to screen planeP_(s) and base plane P_(b-r), P_(b) it is important, in the embodimentshown in FIGS. 1 a-1 e that screen plane P_(s) be slightly angled withrespect to base plane P_(b-r), and P_(b). Configuring terminal 10 sothat screen P_(s) is angled with respect to base plane P_(b-r), andP_(b) assures that screen 20 is readily viewed when base 11 bs issituated or mounted on a horizontal counter top. Still further,referring to mounting features of insert reader 240 insert reader 240 isdisposed proximate right side 11 s of terminal 10 in lip 11 s so thatreader 240 is readily accessible by a user's right hand, allowing a userto readily center his head toward center of screen 20 while insertingcard 90 into reader 240. The positioning of insert reader 240 as shownin addition renders reader 240 resistant to degradation resulting fromenvironmental effects. It is seen that in prior art terminal 900 havingslide or “swipe” reader 910 opening toward a top of terminal 90, dustand debris, which are prevalent in many retail environments, can readilyenter top-opening slot 910 and become trapped therein to negativelyimpact the functioning of terminal 900 reducing the product life ofterminal 900. The orientation of insert reader 240 substantiallyparallel to the horizontal plane results in a reduction in the volume ofmoisture (as may be caused by cleaning) dust and debris and other aparticulate matter from the retail environment which enter reader 240.As indicated previously, angling slot 245 downward with respect thehorizontal plane further reduces particulate and moisture build-up inslot 245 because such angling further reduces the amount of particulatethat can enter slot 245 and encourages a percentage of particulate andmoisture that does enter slot 245 to be forced out of slot 245 bygravity.

As best seen FIGS. 6 a-6 d, hybrid reader unit 240 may comprise apackaged modular form factor. Reader unit 340 may be packaged in a formthat does not include SAMS IC chips 610, as indicated by FIGS. 6 a and 6b, and may, in the alternative be packaged in a form that does includeSAMS chips 610, as best seen in FIGS. 6 c and 6 d. SAMS (Security AccessModule System) is a system in place in some transaction cycles forsupport mainly of customer loyalty card applications and cash cardapplications. SAMS IC chips 610 are necessary for support of SAMS. Aspart of SAMS, SAMS IC chips 610 must, from time to time be removed fromdevices in which they are installed and replaced. In accordance with theinvention as best seen in FIGS. 1 j and 1 k, transaction terminalhousing 11 may include a SAM access door 612 for allowing access to SAMIC chips 610 without requiring disassembly of housing making body 11MB(which all be discussed would trip a security circuit). Housing 11 asseen in FIGS. 1 j and 1 k may include SAM access door 610 detachablyattachable or pivotally attached to housing bottom 11 b.

Referring to further aspects of terminal 10 relating to housing 11,terminal 10 further includes stylus holder apparatus 70 which isdescribed in detail with reference to FIGS. 1-3 and 5 c-5 f. Holderapparatus 70 is a one-piece stylus mounting apparatus, including both awell 72 for holding a stylus 74 and a connection device 73 forconnecting a systems cord. By contrast, in prior art transactionterminal 700 shown in FIG. 7 stylus 730 is held in holder 740 whilestylus cord 750 is connected to prior art terminal on a connection point760 away from holder apparatus 740. Providing a one-piece stylus holderapparatus 70 which both includes a holder which holds pen stylus 74 andwhich includes a proximately disposed connection device 73 for cord 75greatly is particularly advantageous when one-piece holder apparatus 70is adapted to be detachable with respect to housing 11. It is seen, ifholder e.g. 72 and connection device 73 are provided at differentspaced-apart locations on housing 11 as in terminal 900, positioning ofholder 72 at a position away from terminal 10 (such as mounting it on awall, a counter top, a beam, and a cash register) would bedisadvantageous because the cord 75 would assume a stretched-out state.If cord 75 is in a stretched out state, entry of a signature by a useris rendered difficult. Providing a holder apparatus 70 which includesboth cord connection device 73 and a proximally located pen holder 72yield a significant advantage if holder apparatus 70 is madenon-integral and selectively attachable with respect to housing 11.Where holder apparatus 70 is adapted to be nonintegral and selectivelyattachable with respect to housing 11 holder apparatus 70 can be movedinto a variety of positions (e.g. mounted to a wall, counter top, cashregister, etc.) in the general area of terminal 10, and in anyone ofthose variety of positions, cord 75, connected to connection device 73remains in an untensioned state when pen stylus 74 is held by holder 72.The detachability of holder apparatus 70 allows apparatus 70 to be movedif there is interference with cord 75 by an object in processing withterminal 10.

In the present invention, holder apparatus 70 may be made selectivelyattachable to housing 11 with use of a double-stick adhesive pad(referred to as double stick tape) of one of the many types availablefrom 3M, for example, or with other types of fasteners. In FIG. 5 e itis seen that holder apparatus 70 includes broad surface 76 for receivingdouble-stick tape (not shown). When double-stick tape is applied toholder apparatus 70, holder apparatus 70 may be tape mounted to any oneof a variety of positions selectable by a user including positions onhousing 11 and away from housing 11 (e.g. wall, cash register, etc).Because cord connector 73 is integral with holder apparatus 70 andproximally located with well 72, cord 75 of stylus 74 will beuntensioned when held by holder 72 wherever holder apparatus 70 ismounted. Holder apparatus 70 could also be selectively mounted with e.g.other adhesives or a mechanical fastener such as a screw, bolt, or keyslot faster such as fastener 17 as shown in FIG. 1 j. Holder apparatus70 including connection device 73 may include another holder member forholding stylus 74 in place of well-style holder. For example, holderapparatus 70 can include a groove or slot (not shown) which holds a penstylus by friction forces. Connection device 73 of holder apparatus 70can take on difference to forms as well. In the embodiment of FIG. 5 fconnection device 73 is provided by a set screw bore which receives aset-screw 78. Ring eyelet 77 of cord 75 is disposed about set screw 78and set screw 78 is threaded into threaded bore 73 to secure eyelet 77against holder apparatus 70. Connection device 73 could also comprise,for just one example, a hole formed on holder apparatus 70 whichaccommodates cord 75, wherein cord 75 is prevented from slipping out ofthe hole by means of a knot formed in the cord having a diameter largerthan the hole diameter.

Referring to further aspects of stylus 74, a connecting arrangement forconnecting stylus-end 79 of cord 75 to cord-end 80 of stylus 74 isdescribed in detail with reference to FIG. 5 a. In one embodiment forconnecting cord 75 to pen stylus 74, distal end 80 of pen stylus 74 ismade to include a stepped bore hole 82 and stylus end 79 of cord 74 ismade to include an enlarged cord end. More specifically, stepped borehole is made to include at least two different diameters, d1 and d2, todefine an enlarged bore section 83 and a narrowed bore section 84. Cord75 is configured complementarily with stepped bore 82 to have a distalend 79 of an enlarged diameter that is greater than the diameter, d₁, ofthe narrowed bore section 84, but less than the diameter, d₂, of theenlarged bore section so that enlarged distal end 79 is retained bynarrowed bore section 84. Cords major body 85 should have a diametersufficiently less than narrowed section 84 of stepped bore 82 so as toallow free rotation of cord 75 within narrowed section 84. Configuringcord 75 to have an enlarged section 79 which is accommodated by anenlarged section 83 of bore hole 82 formed in stylus and retained by anarrowed section 84 of the bore hole 82 that has a diameter sufficientto allow free rotation of the cord major body 85 allows cord 75 torotate freely within pen stylus 74, and thereby prevents against thetwisting of “kinking up” of cord 75. Stepped bore hole 82 may furtherinclude a third bore section 87 formed outwardly with respect tonarrowed bore section 87. Third bore section 87 preferably includes adiameter slightly larger than narrowed bore section 84. It will be seenthat third bore section 87 operates to alleviate substantial tensionforces and stresses which would be supplied by narrowed bore section 84on cord 75 at distal end 82 of narrowed bore section 84 in the absenceof third section 87. Cord 75 can be configured to have an enlarged cordsection 79 by means of e.g. a cap, or a crimped-on metallic member as isshown in FIG. 5 b.

In a still further aspect of housing 11, the colors and/or patternsexhibited by the exterior of housing 11 can adapted to aid a user inorienting card 90 in relation to slot 345. As best seen in the top viewof FIG. 1 c housing top lit preferable includes stripe 730 which divideshousing into a first reader zone 732 and a second nonreader zone 734.Stripe 730 encourages a user to move a card toward reader zone 732 ofterminal 10 when moving card 90 in proximity with terminal 10. Furtherin accordance with the invention, reader zone 732 in one embodiment ispreferably manufactured to exhibit a different color than nonreader zone734 so that reader zone 732 further stands out in relation to nonreaderzone 734 to further encourage a user to move a card toward reader zone732 as opposed to nonreader zone 734 when moving a card toward terminal10. Zone 732 may made to exhibit a darker color than zone 734.

Importantly, housing 11 when manufactured to exhibit multiple colorsshould be made to exhibit different colors without substantiallyweakening the structural support and protection provided by housing 11.Housing 11, which may comprise a polycarbonate ABS blend, can be made toexhibit different colors as between zone 732 and zone 734 withoutsubstantial degradation of containment advantages provided by housing 11by utilization of a two-shot molding process during the manufacture ofhousing upper section 11 up, wherein a first shot of the two-shotmolding process defined the color of zone 732 and a second shot of thetwo part molding process defined the color of zone 734.

In yet another aspect of the invention, housing 11 can be made toexhibit colors or patterns in accordance with the colors and/or patternsfor terminal that are desired by the buyer-retailer of terminal 10. Theinventors discovered that the most desirable colors and patterns forhousing 11 vary greatly between different retailers. Some retailers maydesire bright colors for terminal 10 in an effort to attract attentionto terminal 10. Other retailers may desire subtle colors for terminal 10in an effort to reduce psychological stresses which are sometimesassociated with the expenditure of personal funds. Still other retailersmay desire pattern and colors for terminal 10 that are in accordancewith its company trademarks and or advertising campaigns. Otherretailers may desire that terminal 10 carry advertising of a third partybusiness which will subsidize at least in part the cost of terminal 10.

Accordingly, the inventors have adopted a business method for marketingand supplying terminal 10 that is explained with reference to thebusiness model diagram of FIG. 7 c. At step 1, a supplier 750 (who maybe a manufacturer of terminal 10) informs a retailer and buyer ofterminal 10 that terminal 10 can be made to exhibit customizablepatterns and/or colors. At step 1, supplier may advertise to retailerthat a limited number or unlimited number of design/color options areavailable to retailer. Step 1 may be accomplished through informationpublished on an internet website of a supplier 750. At step 2, retailer752 communicates his pattern and/or color request to supplier 750 suchas though a telephone call or by a request entered in the supplier'swebsite. At step 3, a supplier 750 relays the request of the retailerincluding address information to a graphics forming business entity 754that specializes in forming graphics on Ruggedized material. Thegraphics forming business entity may be owned by supplier 750. Thegraphics forming business entity may be an organization such asImmersion Graphics Corp. who specialize in an immersion graphicformation process. The graphics forming business entity may have a stocksupply of terminal 10 or else terminals 10 may be shipped from supplier750 to entity 754 on an as needed business. At step 4, the graphicsforming business entity 754 forms a graphic on a built terminal 10 inaccordance with the method which it specializes in. At step 5, graphicforming business entity 754 ships the graphic-carrying terminal 10 toretailer 752 in accordance with the information previously received fromsupplier 750 regarding the retailer at step 3. Step 5 may be executed byshipping the finished product back to supplier 750 who then routes theproduct to retailer 752.

Referring to further aspects of the invention, terminal 10 may beequipped with a variety of security features, which may take on avariety of forms. Referring to a first security feature, housing 11 isadapted so that if an unscrupulous party attempts to break into housing11 to steal secure information from a storage device of terminal 10, thesecure electronically stored information is automatically destroyed.Referring again to electrical block diagram 2 a of FIG. 2 a, terminal 10includes a security circuit block 220, an embodiment of which is shownin greater detail in FIG. 2 c. As shown in FIG. 2 c security circuitblock 220 may include in one embodiment, an integrated circuit chip 221having volatile memory. In the embodiment shown, chip 221 has both avolatile RAM 222, a ROM 223, and includes a CPU 224. Secure chip 221preferably includes submicron electrical connections rendering itextremely difficult to read information from chip 221 using electricalprobes.

Transaction terminal 10 is adapted so that certain informationpreviously designated as secure information is stored in a designated ICchip. Such information may include, for example, encryption keys orother information which may be designated as secure such as cardidentification numbers, signature information, fingerprint information,and retinal signature information, decoded-out message data decoded frome.g. an optical or RF card reader. In accordance with applicable bankingstandards (ANSI ISO), PIN information, when entered into a POS devicesuch as transaction terminal 10 should be encrypted at terminal 10, aswill be explained. From time-to-time, encryption keys stored in terminal10 may be updated and replaced with new encryption keys. As will bedescribed in further detail herein, transaction terminal 10 is adaptedso that when a user enters PIN information in response to a prompt forPIN information displayed by terminal 10, an encryption algorithm storedin ROM 223 of secure chip 221 is called for execution by IC chip CPU 224to encrypt the pin information in accordance with an encryption keystored in RAM 222. Encryption keys may be stored in other, mechanicallyand logically secure, preferably erasable, storage locations.

Encryption keys which terminal 10 may use for PIN encryption typicallycomprise one of two types: “master session” and DUKPT. Master sessionkeys are used by a symmetrical encryption algorithm. The Data EncryptionStandard (DES) is the most common form of master session keys. Under amaster-session scheme, terminal 10 has a strong “master” key and asecond “session” key. Typical implementations use a weaker session key.The session key is used to encrypt PIN blocks. The master key is used tosecure replacement session keys. Terminal and the first computer (host)of POS Network 300 that receives and processes the encrypted PIN blockmust have the same key. POS Network 300, comprised of many “nodes” orcomputer systems connected by various communications links, translatesthe PIN from the key used by the sending device (terminal, host, etc.)to the encryption key and scheme used by the next node in thetransmission chain. This repeats until the encrypted PIN block arrivesat Issuing Bank 333. Accordingly, “security zones” are created whichincrease the difficulty of an unscrupulous party compromising thesystem. It also allows each zone to trust only the devices with which itdirectly communicates. It also greatly simplifies distribution of thesymmetric keys. A given node must only deal with two other nodes ratherthan every node in the chain. Debit card Issuing Bank 333 does notconvert the PIN block to clear data. Issuing Bank 330 submits theencrypted PIN block to a security device commonly called a NetworkSecurity Processor (NSP). The NSP verifies the PIN validity and returnsa “yes” or “no” response. That response is utilized by issuing bank 330for verifying the validity of the PIN entered on transaction terminal10.

Derived Unique Key Per Transaction (DUKPT) keys and encryption scheme iscommon in POS terminals and PIN pads installed since 1997. The advantageof DUKPT and other similar schemes is that each PIN block encryptionuses a new (“unique”) key whereas the master session encryption uses thesame key for all transactions. In DUKPT PIN systems, over 1 million keyscan be generated from an initial base key. The “T” in DUKPT can alsomean “terminal” since the terminal ID is used to generate the key set, agiven base key can create many unique key sets. DUKPT PIN encryptionkeys are unique and no key can be computed from any other key. So if agiven transaction key is compromised, no other transactions are at risk.The base key is not stored in the terminal. The current method of PINencryption using DUKPT is similar to the master session encryptionmethod described above. Additional data is used and the key is appliedto the PIN block only for the current transaction. The node securityzones are substantially identical to those described above withreference to the master session described above. In many systems, theterminal's DUKPT PIN block is translated to a master session PIN blockat the first intercept computer system which may be e.g. a POS Networkcomputer system of a retailer, or a computer system third party networkprovider. The conversion allows the simpler master session to be usedfor relatively secure host/server point to point communications. Thecomputer centers are physically more secure than distributed transactionterminals. Issuing Bank 330 then processes the authentication accordingto the master session method described above.

With master session keys, all PIN blocks encrypted with a given key canbe decrypted if the key is compromised. Since the master session key isstored in a relatively less secure terminal and distributed in publiclyaccessible locations, the risk of attack is greater. To reduce the risk,most implementations allow for a periodic key exchange where a hostsystem generates a random key value, encrypts it under a strong exchangekey and sends it through POS Network 300 to the terminal 10. All nodesbetween the originator and the terminal must be able to handle the keyexchange. When the new session key arrives at terminal 10, terminaldecrypts the new session key from the master key (which also resides inthe terminal) uses the key for subsequent PIN block encryptions. DUKPTkeys normally do not have to be replaced unless the entire key set isexhausted or the well protected base key is compromised. Further, a dataintegrating encryption algorithm (e.g. MAC) may be utilized by terminal10.

With further reference to a tamper-detection security feature of theinvention, the selection of an IC chip including integrated RAM, ROM anda CPU, wherein encryption keys are stored in volatile RAM 222, anencryption algorithm is stored in ROM 223, and the algorithm is executedby integrated CPU 224, yields an important benefit. If the CPU thatexecuted the encryption algorithm were stored on an IC chip separatefrom the chip including volatile RAM 222, then an unscrupulous party mayattempt to intercept the unencrypted PIN data, with use of probes, whileit is being retrieved by the CPU from its storage location in RAM. Thearrangement above protects against the above potential security breach.An unscrupulous party could not readily, if at all, contact probes ontocircuit tracings of packaged secure IC chip 221 comprising RAM 222 andROM 223.

As indicated in FIG. 2 c, IC chip 221 having volatile RAM 222 and ROM223 is powered by a battery 225 so that information stored in chip 221is destroyed by disconnecting battery 225 from chip 221. Battery 225 maybe a 1400-1800 ma hour battery. Chip 221 may be provided, for example,by a Hitachi H8S/2318 F-2TAT HD64FZ318 IC chip.

Description of a terminal break-in theft prevention scheme is made infurther detail with reference to the block diagrams FIGS. 2 c and 2 d,FIGS. 4 b-4 c (showing partial internal perspective views terminal 10,and particularly the interface between housing 11 and main circuit board290 of terminal 10) and FIG. 4 a showing an assembly diagram forterminal 10. Main circuit board 290 carries the majority of electricalcircuit components of terminal 10. Main circuit board 290 carries all oressentially all of the electrical components described with reference toFIGS. 2 a-2 c herein including control circuit 210 and secure chip IC221.

Referring to the assembly diagram FIG. 4 a transaction terminal housingmain body limb includes an upper mold 11 up which is interfaced to lowermold 11 lw during the assembly of terminal 10. As best seen in FIG. 4 bupper mold 11 up includes four PCB contacting struts 410 each comprisinga bolt-retaining hole 412 for accommodating a bolt 416 or screw. Struts410 are configured to be of such a length so that struts 410 impart acompression securing force to PCB 290 when upper mold 11 up and lowermold 11 lw of transition terminal 10 are connected together. Withfurther reference to FIG. 4 a, PCB 290 includes four open contactwashers 292 integrated into circuit board 290. As best seen in theexploded view of FIG. 4 a open contact washers 292 each comprise aninsulation space 292 so that an electrical connection between firstconductive section 292 c 1 of open contact washer 292 and secondconductive contact 292 c 2 of washer 292 can be made by applying aconductive bridge between the conductive contacts. PCB 290 and uppermold 11 up are complementary configured so that each of the open contactwashers 292 opposes one of the struts 410. When upper mold 11 up isapplied to lower mold 11 lw (on which PCB 290 is previously mounted)struts 410 impart pressure on PCB 290 at each of the open contactwashers 292. In accordance with the invention, contact security washers295 are interposed between struts 410 an open contact washers 292 ateach of the four contact points at the time that upper mold 11 up isapplied to lower mold 11 lw. Contact security washers 292 serve asconductive bridges between the conductive sections of each of the opencontact washers 292. Accordingly, it can be seen that if any attempt ismade to remove any part of upper mold 11 up from lower mold 11 lwelectrical contact between conductive sections 292 c 1 and 292 c 2 of atleast one of the open contact washers 292 will almost certainly bedestroyed. To increase the likelihood that electrical contact betweenconductive sections of at least one of the open contact washers 292 willbe destroyed by a tampering attempt, contact washers 295 can be fixedlysecured to the distal ends 410 e of struts 410, e.g. by an adhesivebonding material. Securing washers 292 to struts 410 assures thatcontact between conductive sections of washers 292 will be destroyed ifupper section 11 up is lifted from lower section 11 lw. The four opencontact washers are disposed at spaced apart positions about circuitboard 290. Such positioning increases the likelihood that electricalcontact between conductive sections of at least one of the open contactwashers will be destroyed by an attempt to remove only a part of uppermold 11 up from terminal 10. Terminal 10 is preferably adapted to thateach of the bolts 416 engages a threaded bore hole when driven intoterminal 410. Threaded bore holes engaging bolts 416 may be formed oneither of both of circuit board 210 and lower mold 11 lw.

As is indicated by the electrical schematic diagram of FIG. 2 c opencontact washers 292 may be serially connected in a circuit powered bysecurity circuit battery 225 (e.g. by circuit traces etched on PCB 290)and contact sensing circuit 226 may be disposed in communication withopen contact washers 292 to sense whether electrical contact betweenconductive sections 292 c 1 and 292 c 2 of one of the washers isdestroyed. If contact between conductive sections of any one of the opencontact washers 292 is destroyed, sensing circuit 226 generates a tampersignal. Terminal 10 may be configured so that if terminal in apowered-down mode a tamper signal generated by sensing circuit 226operates to disconnect secure IC chip 221 from battery 225 as isindicated by switch 227. Terminal 10 may also be configured so thatgeneration of a tamper signal when terminal is in a powered-up mode(wherein secure IC chip 221 is powered by an external power source)results in an erasure instruction being generated that causes the secure(e.g. encryption information) of chip 221 to be erased. The tampersignal causing the erasure instruction to be generated may becommunicated from sensing circuit 226 to e.g. control circuit 210 or tosecure chip IC 221 as indicated by dashed-in contact 228.

Security circuit block 220 may also be configured so that IC chip 221 iserased by disconnecting power therefrom when there is a security breachwhether terminal 10 is in a powered-down mode or powered-up mode. In theembodiment if FIG. 2 d, DC supply, described with reference to FIG. 2 band security battery 225 are both tied to switch 229, (which maycomprise a simple diode circuit) that is responsive to losses in DCsupply power 238 so that security battery 225 power chip 221 only whenthere is a loss of supply power. It is seen that in the circuit of FIG.2 d, that the power supply to IC chip 15 is disconnected to eraseinformation in RAM 222 when there is a security breach resulting in oneor more contacts 292 opening whether terminal is powered up-orpowered-down mode. Circuit 220 in FIG. 2 d includes an isolation circuit293. Isolation circuit 293, which may be for example, a TISN74CBTLV3126FET bus switch, isolates circuit 210 from circuit 221. Isolation circuit293 prevents power from chip 221 from powering circuit 210 when there isa loss of power in circuit 210 and prevents circuit 210 from poweringcircuit 221 when there is a loss of power in circuit 221. Isolator 293may have a data pass mode (allowing data flow) and a data isolation mode(isolating the circuit). The data pass and isolation modes of circuit293 may be made responsive to the voltages produced by meter 294 whichsenses the voltage input to chip 221 and meter 296 which senses voltageinput to control circuit 210.

Referring to further aspects of the invention and relating to thesecurity feature just described, transaction terminal 10 in the assemblyview shown in FIGS. 4 a and 4 b may include lower and upper cover panels21 and 22 some features of which are described in U.S. application Ser.No. 09/750,479 filed Dec. 28, 2000 assigned to the assignee of Lowercover panel 21 including open window 21 w surrounds overlay 230 andcovers electrical lead lines carrying data from overlay 230. Lower overpanel 21 is bonded to upper section 11 up to create a moisture anddirt-tight seal there between, as well as physically protecting the leadlines. Second upper cover panel 22 is placed over lower panel 21. Upperpanel 22 includes a frame 22 f and a light transmissive protectivewindow 22 w mounted in frame 22 f. When upper panel 22 is disposed onlower panel 21 protective window 22 is in close proximity with overlay230 so that a signature written on window 22 w will be recorded byoverlay 230. The lower surface of upper panel 22 contains an adhesivewhereby the upper cover panel can be easily removed when window 22 wbecomes worn or damaged. A warning message 21 m is printed on lowerpanel 21 which is clearly discernable when the upper cover panel isremoved, warning the user not to write upon touch screen 20 until theupper panel is replaced.

In a further aspect of a panel system according to the invention, uppersection 11 up and panels 21 and 22 are complementarily formed so thatbore holes 419 h and the bolts or screws 416 which they accommodate arecompletely hidden from view when panels 21 and 22 are attached tohousing 11. In the embodiment of FIG. 4 a, it is seen that bolts orscrews 416 which operate to secure upper section 11 up to lower section11 lw are accommodated by bolt holes and are formed in housing 11 insuch a position that both fasteners 416 and holes 410 can be hidden fromview by application of panel 21. Further, lower panel 21 is made opaqueso that these bolt holes 410 h and fasteners 416 are substantiallycompletely hidden from view when lower cover panel 21 is applied tohousing 11. Because, holes 410 and fasteners 416 for holding the partsof housing together are hidden from view in the terminal of FIG. 1 a, aperson cannot determine the assembly features of terminal by inspection.The unscrupulous party considering opening terminal 10 may determinefrom inspection that terminal 10 is held together by forces suppliedother than detachable fastening devices such as bolts or screws and maytherefore give up the idea of breaking into terminal 10.

As has been described herein, PIN information should be encryptedwhenever it is entered into terminal 10. If PIN information is notencrypted by terminal 10, an unscrupulous party may attempt toelectronically syphon the PIN information from a storage device ofterminal or in a computer system located upstream from terminal in thetransaction cycle depicted in FIG. 3 a. Other sensitive information maybe designated as secure information which is to be encrypted. Forexample, credit card number information, debit card number information,personal identification information, signature information, fingerprintinformation, retinal signature information or other information whichmay be designated as secure, and received by any one of user interfacedevices RFID 261, optical reader imaged assembly 263, fingerprintscanner 265, retinal scanner 267, unit 240, etc. may be encrypted byterminal 10. In some countries, credit card numbers are required to beencrypted.

Terminal 10 is preferably adapted so that an operating program ofterminal 10 can be customized by an user-programmer, so that thecharacteristic of, and sequence of, e.g. prompts, other messages, menusdisplayed by touch screen 20 are configurable by an user-programmer. Inaccordance with the invention, a programmer-user may developinstructions of an operating program using a program builder system 390as seen in FIG. 3 h (typically provided by a PC as shown) and thentransmits the set of instructions built using the builder system 390 toterminal 10 over breakable link 392. However, providing aprogrammer-user with the capacity to freely define features of aterminal's main operating program raises the possibility that anunscrupulous user-programmer may develop prompts which encourage acustomer-user to enter PIN information or other designated secureinformation without an encryption sequence of instructions properlybeing executed. The unscrupulous user-programmer may then electronicallysyphon the unencrypted PIN information or other secure information.

Accordingly, terminal 10 may be adapted to include a secure informationentry feature which is described with reference to FIGS. 2 d, 2 e and 2f. In accordance with a secure information entry feature of theinvention, terminal 10 may include a secure information entry circuit280 included in the embodiment shown as central processing unit 281, aprogram ROM 283, working RAM 282 and cryptographic firmware 285 whichresults in an encryption mode signal carried by line 286 being caused tochange state whenever an encryption routine (executed in accordance withprogram instructions which may be stored in ROM 283) is called, whichencryption mode signal can only be generated by calling the encryptionroutine. Further, in accordance with the secure information entrysecurity feature, an indicator 287 is made responsive to the selectivestate changing encryption mode signal so that the indicator 287 isactive only when the encryption routine is called. Preferably, firmware285 is established so that indicator 287 is made responsive only to theencryption mode signal caused to change state by the secure informationentry circuit so that an unscrupulous party cannot cause indicator 287to be actuated in a mode other than an encryption mode. Still further,in accordance with the secure information entry security feature, in oneembodiment an information message 288 is displayed on or about terminal10 or visible by a user of terminal 10 which informs a customer-user 310that the customer-user 10 should enter secure e.g PIN information onlyif indicator 287 is active. Information message 288 is preferablysubstantially permanently affixed to terminal 10 so that an unscrupulousparty cannot easily remove or destroy message 288. Information message288 may be printed or formed as part of the graphics of upper coverpanel frame 22 f for example, or on a part of lower panel 21 visiblewith upper panel 22 attached. Information message 288 may also be formedon a normally visible part of housing such as with etching, stamping,immersion graphics, a sticker, etc., preferably in proximity withindicator 287.

Referring to aspects of the secure information entry feature of theinvention in further detail, cryptographic firmware 281 of secureinformation entry circuit 280 can take on a variety of forms. Ingeneral, the term “firmware” as used herein shall refer to any hardwareor software or combination hardware/software element of a processorbased controller which cannot be changed by the ordinary methods andprotocols available for use by a user-programmer for changinginstruction of a main program of the processor based controller.

As will be discussed in greater detail herein, circuit 280 may comprisecomponents of control circuit 210. Accordingly, it will be seen that thecharacteristic of cryptographic firmware 285 of secure information entrycircuit 280 may vary depending on the software architecture selected forallowing reprogramming of terminal control circuit 210 (changing ofinstructions of the main program). Alternative software architecturewhich may be employed for enabling changing of instructions of a mainprogram associated with control circuit 210 with use of a programbuilder system 390 are described with reference to the memory mapdiagrams of FIGS. 2 e and 2 f. In one software architecture for allowingreprogramming of terminal 10, program builder 390 builds and controlcircuit 210 executes a compiled program. It is preferable that programbuilder system 390 allows programing of terminal using high levelprogramming instructions or with use of graphical user interface promptswherein program instructions are built by system 390 in response toprogrammer-user inputs that are input into system 390 using a GUI inresponse to GUI displayed prompts displayed on display 390 d.Accordingly, program builder system 390, may build an operating programfor terminal 10 in a high level language such as C or C++ which has tobe compiled into machine code for execution. A main operating programwritten in a high level programming language and built in system 390 canbe compiled into machine code in system 390 or in control circuit 210,if control circuit 210 is equipped with an operating system. In the casethat control circuit 210 executes a compiled program or an assembledprogram (e.g. written in assembly code at system 390 and than assembled)cryptographic firmware 285 circuit 280 and circuit 210 may take the formas shown in the ROM program memory map as shown in FIG. 2 e. Asindicated by FIG. 2 e several address locations 270 of program ROM 283may be allocated for storing compiled operating program whereas otheraddress locations 271 may be allocated for storing firmware instructionswhich are not affected by the compiling and loading of a new operatingprogram on ROM 283. In the example of FIG. 2 e firmware 281 refers tocode instructions stored on firmware allocated address locations 290 ofROM 283. Cryptographic firmware 285 in the example of FIG. 2 e may bee.g. a set of instructions which operate to poll the contents ofinstructions called for execution by compiled program stored inaddresses 270. When a called instruction is an instruction to call anencryption routine, cryptographic firmware 285 results in an encryptionmode signal changing state.

In another architecture which may be employed from allowingreprogramming of terminal 10, circuit 210, 280 executes a script program(which is sometimes referred to simply as a script) that is built by aprogrammer-user at builder system 390 using high level instructions ore.g. by inputting inputs in response GUI displayed programming promptsdisplayed on display 390 d. When circuit 210, 280 is of the type thatexecutes a script program, ROM 283, 218 stores an interpreter programstored in address locations 270. When a script program architecture isselected, script instructions built at builder system 390 do not have tobe complied into machine code prior to being executed. Instead, when ascript program architecture is selected, interpreter program stored at270 interprets and executes script instructions built at system 390 andthereby eliminates the need to compile a set of high lever instructionsauthored at system 390 into machine code prior to their execution byterminal 10. In the example of FIG. 2 f “firmware” can be considered toinclude code instructions of the interpreter program stored at addresslocations 270 since these instructions cannot be affected by changes inthe script code built at builders system 390. In addition, when ROM 283,218 includes an interpreter program, ROM 283, 218 can include additionalfirmware at locations 271 of the type described with reference to FIG. 2e (i.e. memory stored instructions impervious to changes in aninterpreter program). While firmware is shown in the memory maps ofFIGS. 2 e and 2 f to be included in program ROM 283, 218, it will beunderstood firmware can also be included in working RAM 282 or in aninternal register of CPU 281.

It will be understood that the above archetypal examples are selectedmerely to highlight that cryptographic firmware 285 can take on avariety of different forms and are not intended to rigorously define theprecise characteristic of subject matter that can be consideredfirmware. In fact many software architectures exhibit characteristics ofboth of the archetypal architectures described. Still further it will beunderstood that firmware e.g. 285, while most typically comprising someform of user inaccessible or difficult to access code instructions, neednot comprise any code instructions. For example, cryptographic firmware285 according to the invention can include discreet IC formed electricalcircuit components tied to an appropriate address bus location e.g. akey storing address 291 of RAM 282 or ROM 283 called during execution ofan encryption routine of the invention which circuit components areoperative to change the state of an encryption mode signal when such anaddress is selected.

As has been indicated herein and again by FIG. 2 d encryption keysutilized by an encryption routine are preferably stored in batterypowered volatile RAM 282 which can be erased either by an instruction orby disconnecting a battery B supplying power thereto. Accordingly, asalluded to previously in one specific example of secure informationentering circuit 280, circuit 280 may include elements of both controlcircuit 280 and security block 220, as is indicated by reference numeral280 of FIGS. 2 c and 2 d.

Additional features of the invention will be understood with referenceto one specific example of the invention. A flow diagram explainingoperations of secure information entry circuit 280 as may occur whenexecuting an encryption routine utilizing the two CPU architecture ofFIGS. 2 c and 2 d is described in detail with reference to the flowdiagram of FIG. 2 h. At block 295 a CPU 212 executing instructionsstored in ROM 218 of circuit 210 determines if an encryption routine hasbeen called, e.g. by selection of a menu option of a user or an insertand reading of a card by a user. If an encryption routine is called,cryptographic firmware 285 at block 295 b changes the state of anencryption mode signal carried by line 286 from a first state to asecond state to turn indicator ON. At block 295 c CPU 212 causes virtualkeypad to be displayed on touch screen 20. At block 295 d CPU 212captures the entered keystrokes and at block 295 e CPU 212 sends the PINinformation to circuit 221, and calls for the encryption algorithmstored in ROM 223 of chip 221 to be executed. At block 295 f, CPU 224 ofchip 221 executes this encryption algorithm using encryption keys storedin RAM 222, and at block 295 g CPU 224 sends encrypted PIN informationto RAM 217 of circuit 210. As indicated by block 295 h, CPU 212 has beenpolling line 297 for received data. When data is received by circuit 210CPU 212 changes the state of the encryption mode signal to its originalstate. It is seen that the above example is applicable to any otherapplication as described herein, wherein encryption may be useful. Foradapting the method of FIG. 2 h for another application involvingencryption of the PIN pad user prompt setup (block 295 c) may besubstituted for by another prompt message (a text message “Insert Card,”“Place Finger on Recess,” etc.).

Referring to further aspects of indicator 287 a secure information entryfeature of the invention, indicator 287 may take on several forms. Inthe example of FIGS. 1 a, 1 f and 4 a indicator 287 is provided by anLED 287L mounted on main circuit board 290 in combination with a lightpipe 287 p having a distal end 287 pd visible at top 11 a of terminal 10proximate touch screen 20. In one example, the changing of theencryption mode signal from a first state to a second state changes alight source indicator from an OFF state to an ON state. However,terminal 10 could be configured so that the changing of the state of theencryption mode signal from a first state to a second state could alsochange the state of light source indicator from an ON state to an OFFstate. When indicator 287 is a light source, the light source may be alight source other than an LED, such as a filament used light source.Indicator 287 can be provided by a changing of the control of abacklight 236 of display 234. Further, a change in the state of theencryption mode signal need not change the state of a light sourceindicator from an OFF state to an ON state. Terminal 10 could be adaptedso that a change in the state of the secure mode signal increases theintensity of light from a first ON state to a higher intensity secondstate. In addition, more than one light source can be used. Stillfurther, indicator 287 if a light source need not be located at terminal10. A light source indicator could comprise overhead or other visiblelights proximate terminal 10 for example.

Importantly, indicator 287 need not comprise a light source. Indicator287 could comprise an acoustic output device in terminal 10 or away fromterminal 10. Indicator 287 could also be a graphical icon or messagedisplayed on screen 20 or on a display e.g. display 340 spaced apartfrom terminal 10. The state changing encryption mode signal (which maybe encrypted by terminal 10) can be transmitted to any computer systemof POS network 300, shown in FIG. 3 a, and any computer system of POSnetwork may control indicator 287. Further, hub 360 may include aprogram which monitors encryption mode signal data from each of severalterminals 10, to maintain a record on PIN captures, and report anyanomalous events (e.g., encryption mode signal state changes notcorresponding to PINs captures).

Referring to further aspects of information message 280, it will beunderstood that the attributes of information message 288 will changedepending on what secure information is being captured by terminal 10and the characteristics of indicator 287. In the example of FIG. 1 awherein indicator 287 comprises an LED and the secure information is PINinformation, message information may be printed matter formed on housingstating “DO NOT ENTER PIN INFORMATION UNLESS LIGHT IS ON”. If the secureinformation to be encrypted is a credit card number, and indicator is anacoustic device, then information message 288 may be printed matterwhich states “DO NOT INSERT CARD UNLESS TONE IS SOUNDED”. In addition toor instead of being comprised of printed matter message information 288may be electronically generated text information displayed by screen 20,permanently generated by firmware of terminal or caused by terminalfirmware to be displayed by previous action of a user. Also, informationmessage 288 need not be located on terminal 10. Information message 288may be printed matter or electronically generated message data at alocation proximate terminal, such as on a sign proximate terminal 10.Information message 288 may also include printed matter included inproduct literature supplied by a supplier of terminal, and may includeelectronically displayed messages which may be accessed by accessing awebsite of a supplier of terminal.

While the present invention has been explained with reference to thestructure disclosed herein, it is not confined to the details set forthand this invention is intended to cover any modifications and changes asmay come within the scope of the following claims.

1. A transaction terminal for reading information from a credit card ina retail point of sale transaction, said transaction terminalcomprising: a card reader unit for reading said credit card, said cardreader unit including a slot for receiving said credit card, at leastone magnetic stripe reader for reading magnetic stripe encoded data, anda smart card reader for reading encoded data of an integrated circuitdisposed on said credit card; a control circuit coupled to said cardreader unit, said control circuit configured to receive information readfrom said credit card by said card reader unit; a touch screen includinga display and a touch screen overlay, said transaction terminalconfigured so that signature information can be entered into said touchscreen utilizing a stylus; and a housing encapsulating said controlcircuit and components of said card reader unit for reading said creditcard, said housing further supporting said touch screen, wherein saidhousing further includes a base and a top surface, said touch screenbeing disposed at said top surface, said housing further defining saidslot of said card reader unit and further including a circumferentiallip extending at least one of outwardly sideward or outwardly forwardfrom said base, said circumferential lip extending about a perimeter ofsaid housing, wherein said housing further has disposed thereon a holderapparatus for holding a stylus for use in entering data into saidtransaction terminal.
 2. The transaction terminal of claim 1, whereinsaid circumferential lip is a circumferential lip that extends entirelyabout a periphery of said housing.
 3. The transaction terminal of claim1, wherein said circumferential lip defines a curved profile from both atop view of said transaction terminal and a front view of saidtransaction terminal.
 4. The transaction terminal of claim 3, wherein aportion of said base at a front of said housing defines a curved profileas seen from a bottom view of said transaction terminal.
 5. Thetransaction terminal of claim 1, wherein said arcuate surface of saidcircumferential lip defines a curved profile from both a top view ofsaid transaction terminal and a side view of said transaction terminal.6. The transaction terminal of claim 1, wherein said slot of said cardreader unit opens at a front of said housing.
 7. The transactionterminal of claim 1, wherein said card reader unit is an insert stylecard reader unit.
 8. The transaction terminal of claim 1, wherein saidslot of said card reader unit, said base, and said touch screen are allsubstantially coplanar.
 9. The transaction terminal of claim 8, whereinsaid slot of said card reader unit, said base, and said touch screen alldefine planes having a downward angle from the back of said housing tothe front of said housing.
 10. The transaction terminal of claim 1,wherein said holder apparatus for holding said stylus is configured tobe detachably attached to said housing.
 11. The transaction terminal ofclaim 1, wherein said control circuit has a mode of operation in whichsaid control circuit configures said transaction terminal to display avirtual keypad onto said touch screen to accommodate entry of data by auser onto said touch screen.
 12. The transaction terminal of claim 1,wherein said control circuit has a mode of operation in which saidcontrol circuit configures said transaction terminal to capture asignature entered by a user onto said touch screen.
 13. The transactionterminal of claim 1, said transaction terminal further comprising adetachable riser.
 14. The transaction terminal of claim 1, saidtransaction terminal further comprising an integrated fingerprintscanner unit.
 15. The transaction terminal of claim 1, said transactionterminal further comprising an RF communication interface for enablingcommunication with a nonintegrated computer system.
 16. The transactionterminal of claim 1, wherein said card reader unit is disposed in saidcircumferential lip.
 17. The transaction terminal of claim 1, saidtransaction terminal further comprising a secure information entrycircuit including a program having an encryption routine, wherein saidsecure information entry circuit includes cryptographic firmware adaptedto change the state of an encryption mode signal when said encryptionroutine is actuated, and wherein said transaction terminal furtherincludes a user-perceivable indicator responsive to said encryption modesignal.
 18. The transaction terminal of claim 1, wherein said housingcomprises an upper section and a lower section, wherein said controlcircuit is in communication with a secure IC chip comprising a volatilememory, wherein said transaction terminal further includes a battery forpowering said secure IC chip, wherein said transaction terminal isadapted so that said battery is disconnected from said secure IC chip ifsaid upper section is removed from said lower section.
 19. Thetransaction terminal of claim 1, wherein said housing includes animaging assembly aperture further comprising an optical reader unitcomprising an imaging assembly, wherein said imaging assembly isincorporated in said housing in such manner that light received by saidassembly passes through said imaging assembly aperture.
 20. Thetransaction terminal of claim 1, wherein at least a portion of saidhousing and at least a portion of said base are molded together.
 21. Thetransaction terminal of claim 1, wherein said circumferential lipextends sideward from said base.
 22. The transaction terminal of claim1, wherein said circumferential lip extends forward from said base. 23.The transaction terminal of claim 1, wherein said circumferential lipextends leftward from said base.
 24. The transaction terminal of claim1, wherein said circumferential lip extends forward and leftward fromsaid base.
 25. A transaction terminal for reading information from acredit card in a retail point of sale transaction, said transactionterminal comprising: a card reader unit for reading said credit card,said card reader unit including a slot for receiving said credit card,at least one of a magnetic stripe reader for reading magnetic stripeencoded data, and a smart card reader for reading encoded data of anintegrated circuit disposed on said credit card; a control circuitcoupled to said card reader unit, said control circuit configured toreceive information read from said credit card by said card reader unit;a signature capturing touch screen including a display and a touchscreen overlay, said transaction terminal being configured so thatsignature information can be entered into said signature capturing touchscreen utilizing a stylus; and a housing encapsulating said controlcircuit and components of said card reader unit for reading said creditcard, said housing further supporting said signature capturing touchscreen, wherein said housing further includes a base and an enlargedhead portion, said enlarged head portion having a top surface, saidenlarged head portion extending at least one of sideward or forward fromsaid base, said signature capturing touch screen being disposed at saidtop surface of said enlarged head portion in such manner that said touchscreen delimits a substantial portion of a top surface of said housing,said housing further defining said slot of said card reader unit,wherein said enlarged head portion defines a curved profile both from atop view of said transaction terminal and at least one of a side viewand a front view of said transaction terminal.
 26. The transactionterminal of claim 25, wherein said enlarged head portion defines acurved profile from both a top view of said transaction terminal and afront view of said transaction terminal.
 27. The transaction terminal ofclaim 25, wherein said enlarged head portion defines a curved profilefrom both a top view of said transaction terminal and a side view ofsaid transaction terminal.
 28. The transaction terminal of claim 25,wherein said slot of said card reader unit opens at a front of saidhousing.
 29. The transaction terminal of claim 25, wherein said cardreader unit is an insert style card reader unit.
 30. The transactionterminal of claim 25, wherein said enlarged head portion extends aboutsubstantially the entire perimeter of said housing.
 31. The transactionterminal of claim 25, wherein said enlarged head portion extendssideward from said base.
 32. The transaction terminal of claim 25,wherein said enlarged head portion extends forward from said base. 33.The transaction terminal of claim 25, wherein said enlarged head portionextends leftward from said base.
 34. The transaction terminal of claim25, wherein said enlarged head portion extends forward and leftward fromsaid base.
 35. A transaction terminal for reading information from acard in a retail point of sale transaction, said transaction terminalcomprising: an insert style card reader unit for reading said card, saidinsert style card reader unit including a slot for receiving said cardand a smart card reader for reading encoded data of an integratedcircuit disposed on said card; a control circuit coupled to said cardreader unit, said control circuit configured to receive information readfrom said card by said card reader unit; a signature capturing touchscreen including a display and a touch screen overlay; and a housingencapsulating said control circuit and components of said insert stylecard reader unit, said housing further supporting said signaturecapturing touch screen, wherein said housing further includes a base anda top surface, said signature capturing touch screen being disposed atsaid top surface, said housing further defining said slot of said insertstyle card reader unit and further including a circumferential lipextending outwardly from said base, said circumferential lip extendingat least one of sideward or forward from said base, wherein said housingfurther has disposed thereon a holder apparatus for holding a stylus foruse in entering signature data into said transaction terminal, whereinsaid base has a base plane, wherein said display has a screen plane andwherein said slot of said insert style reader has a slot plane, andwherein said transaction terminal is configured so that both of saidscreen plane and said slot plane are angled downwardly toward said baseplane to form an acute angle with respect to said base plane, whereinsaid transaction terminal is configured so that said screen plane isoriented such that a higher portion of said screen plane is positionedrearward on said terminal relative to a lower portion of said screenplane, and wherein said transaction terminal is also configured so thata higher portion of said slot plane is also positioned rearward on saidtransaction terminal relative to a lower portion of said slot plane. 36.The transaction terminal of claim 35, wherein said transaction terminalis configured so that cards inserted into said slot of said insert stylecard reader unit are moved in an upward direction when inserted intosaid slot, and are moved in a downward direction when removed from saidslot.
 37. The transaction terminal of claim 35, wherein said transactionterminal is configured so that said slot is disposed at a front of saidhousing.
 38. The transaction terminal of claim 35, wherein saidtransaction terminal is configured so that a rear of said slot ispositioned at a position higher than a front of said slot.
 39. Thetransaction terminal of claim 35, wherein said transaction terminal isconfigured so that dirt and debris fall out of said slot by way ofgravitational forces.
 40. The transaction terminal of claim 35, whereinsaid first portion of said circumferential lip extends at least about0.25 inch from said base.
 41. The transaction terminal of claim 35,wherein said first portion of said circumferential lip extends at leastabout 0.50 inch from said base.
 42. The transaction terminal of claim35, wherein said first portion of said circumferential lip extends atleast about 0.75 inch from said base.
 43. The transactional terminal ofclaim 35, wherein said transaction terminal is configured to read bothsmart cards and magnetic stripe cards.
 44. The transaction terminal ofclaim 35, said transaction terminal further comprising an integratedfingerprint scanner unit.
 45. The transaction terminal of claim 35,wherein said screen plane and said slot plane are at different angleswith respect to said base plane.
 46. The transaction terminal of claim35, wherein said circumferential lip extends sideward from said base.47. The transaction terminal of claim 35, wherein said circumferentiallip extends forward from said base.
 48. The transaction terminal ofclaim 35, wherein said circumferential lip extends leftward from saidbase.
 49. The transaction terminal of claim 35, wherein saidcircumferential lip extends forward and leftward from said base.
 50. Atransaction terminal for reading information from a card in a retailpoint of sale transaction, said transaction terminal comprising: aninsert style card reader unit for reading said card, said insert stylecard reader unit including a slot for receiving said card and a smartcard reader for reading encoded data of an integrated circuit disposedon said card; a control circuit coupled to said card reader unit, saidcontrol circuit configured to receive information read from said card bysaid card reader unit; a signature capturing touch screen including adisplay and a touch screen overlay; and a housing encapsulating saidcontrol circuit and components of said insert style card reader unit,said housing further supporting said signature capturing touch screen,wherein said housing further includes a base and a top surface, saidtouch screen being disposed at said top surface, said housing furtherdefining said slot of said insert style card reader unit and furtherincluding a circumferential lip extending outwardly from said base, saidcircumferential lip extending at least one of sideward or forward fromsaid base, said circumferential lip having a first portion extendingcontinuously from a front of said housing to a left rear of saidhousing, wherein a vertical cross section of said first portionthroughout a length thereof defines a generally semicircle shapedsurface tapering outwardly from an interior of said housing and theninwardly moving in a direction upwardly on said terminal, said firstportion of said circumferential lip defining a generally semicircleshaped edge from a top view; and wherein said base has a base plane,wherein said display has a screen plane and wherein said slot of saidinsert style card reader unit has a slot plane, and wherein saidtransaction terminal is configured so that both of said screen plane andsaid slot plane are angled downwardly toward said base plane to form anacute angle with respect to a base plane, wherein said transactionterminal is configured so that said screen plane is oriented such that ahigher portion of said screen plane is positioned rearward on saidterminal relative to a lower portion of said screen plane, and whereinsaid transaction terminal is also configured so that a higher portion ofsaid slot plane is also positioned rearward on said transaction terminalrelative to a lower portion of said slot plane.
 51. The transactionterminal of claim 50, wherein said transaction terminal is configured sothat a rear of said slot is positioned at a position higher than a frontof said slot.
 52. The transaction terminal of claim 50, wherein saidtransaction terminal is configured so that dirt and debris fall out ofsaid slot by way of gravitational forces.
 53. The transactional terminalof claim 50, wherein said transaction terminal is configured to readboth smart cards and magnetic stripe cards.
 54. The transaction terminalof claim 50, wherein said housing includes an imaging assembly aperturefurther comprising an optical reader unit comprising an imagingassembly, wherein said imaging assembly is incorporated in said housingin such manner that light received by said imaging assembly passesthrough said imaging assembly aperture.
 55. The transaction terminal ofclaim 50, wherein said screen plane and said slot plane are at differentangles with respect to said base plane.
 56. The transaction terminal ofclaim 50, wherein said circumferential lip extends sideward from saidbase.
 57. The transaction terminal of claim 50, wherein saidcircumferential lip extends forward from said base.
 58. The transactionterminal of claim 50, wherein said circumferential lip extends leftwardfrom said base.
 59. The transaction terminal of claim 50, wherein saidenlarged head portion extends forward and leftward from said base.
 60. Atransaction terminal for reading information from a card in a retailpoint of sale transaction, said transaction terminal comprising: aninsert style card reader unit for reading said card, said insert stylecard reader unit including a slot for receiving said card and a smartcard reader for reading encoded data of an integrated circuit disposedon said card; a control circuit coupled to said card reader unit, saidcontrol circuit configured to receive information read from said card bysaid card reader unit; a signature capturing touch screen including adisplay and a touch screen overlay; and a clamshell housingencapsulating said control circuit and components of said insert stylecard reader unit, said clamshell housing further supporting saidsignature capturing touch screen, wherein said clamshell housing furtherincludes a lower mold having a base and an upper mold having a topsurface, said touch screen being disposed at said top surface, saidhousing further defining said slot of said insert style card reader unitand further including a circumferential lip extending outwardly fromsaid base, said circumferential lip extending at least one of sidewardor forward from said base, said circumferential lip having a firstportion extending continuously from a front of said housing to a leftrear of said housing, wherein a vertical cross section of said firstportion throughout a length thereof defines a generally semicircleshaped surface extending outwardly from an interior of said housing andthen extending inwardly toward an interior of said housing moving in adirection upwardly on said terminal, wherein a lower portion of saidgenerally semicircle shaped surface is defined by said lower mold andwherein an upper portion of said generally semicircle shaped surface isdefined by said upper mold, wherein said transaction terminal is furtherconfigured so that said first portion of said circumferential lipdefines a generally semicircle shaped edge from a top view of saidtransaction terminal; and wherein said base has a base plane, whereinsaid display has a screen plane and wherein said slot of said insertstyle card reader unit has a slot plane, and wherein said transactionterminal is configured so that at least one of said screen plane andsaid slot plane are angled downwardly toward said base plane to form anacute angle with respect to said base plane.
 61. The transactionterminal of claim 60, wherein said transaction terminal is configured sothat a rear of said slot is positioned at a position higher than a frontof said slot.
 62. The transaction terminal of claim 60, wherein saidtransaction terminal is configured so that dirt and debris fall out ofsaid slot by way of gravitational forces.
 63. The transactional terminalof claim 60, wherein said transaction terminal is configured to readboth smart cards and magnetic stripe cards.
 64. The transaction terminalof claim 60, wherein said screen plane and said slot plane are atdifferent angles with respect to said base plane.